Vulnerabilities > Flycart
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-16 | CVE-2024-8541 | Cross-site Scripting vulnerability in Flycart Discount Rules for Woocommerce The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. | 6.1 |
| 2022-07-17 | CVE-2022-2090 | Cross-site Scripting vulnerability in Flycart Discount Rules for Woocommerce The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting | 6.1 |